$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: tGpeOTILr8540PdoSfv5k3rHa1aq1IwN4z7hZHG7q8s= Subject key identifier: CB:79:C5:AA:E1:82:AA:D6:A8:11:32:51:6F:03:D4:93:04:7B:33:8C Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: 019B Signing time: Fri 25 Apr 2025 02:31:35 +0000 Manifest this update: Fri 25 Apr 2025 02:31:34 +0000 Manifest next update: Fri 02 May 2025 02:31:34 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: rDWWjPmszMicJfOu7bvB6AiG++0r0MMuvthW/h0Y1CU=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: R2fgHMU976+Qe8LJMOcQoSeVupcwkHm/BpOIqV/u37U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431, serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Validity Not Before: Apr 25 02:31:34 2025 GMT Not After : May 2 02:31:34 2025 GMT Subject: CN=680af407-6b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:78:17:1c:e1:c7:66:6e:db:8f:10:ca:82: 95:1f:b6:a8:b7:c5:cd:ba:9c:93:ea:e7:08:ba:34: 19:a8:c6:fe:03:27:08:f5:0c:2d:5e:b2:34:5c:5d: fc:82:f0:5e:3e:65:a4:64:b4:b5:6f:d4:ab:12:23: 02:2b:21:f9:ff:1d:66:90:69:79:8a:16:a5:56:5b: 4d:6d:c0:75:05:24:67:70:cc:50:3d:90:0f:24:f3: 26:8b:0e:88:57:42:c2:64:e2:f4:21:cb:c5:4d:bf: 64:16:22:63:65:2a:9b:21:5f:de:71:bc:4b:12:45: eb:05:f8:ac:13:a5:39:d7:f9:61:cb:5e:a1:70:27: 66:00:d2:51:57:ae:b1:ca:38:c5:10:b1:66:7b:ef: f6:de:cd:cd:77:5b:cc:57:ae:8e:62:a8:0a:db:bf: cc:cb:51:9b:a8:da:37:2a:61:29:a4:69:82:74:f6: 7e:c6:10:55:75:1b:3d:2b:9f:e3:32:ff:6c:8a:34: dd:55:c9:dd:b3:d1:d9:9f:58:e0:b9:f2:ce:dd:2d: 0d:c9:f1:af:47:f1:64:6d:09:29:9d:e2:ce:00:07: 33:a8:fd:d3:ae:74:c0:99:18:a0:a4:10:a2:f7:76: 42:3d:90:c5:7c:a8:70:00:e5:2e:78:85:f5:1b:0c: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:79:C5:AA:E1:82:AA:D6:A8:11:32:51:6F:03:D4:93:04:7B:33:8C X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:bc:45:ab:f9:e2:f6:0a:dc:2b:ab:70:70:64:1f:6e:29:fc: f5:bc:7a:6e:e7:81:9c:7d:a2:4e:ca:97:a3:e2:c0:85:61:0a: b6:c6:0a:23:2e:7d:b3:82:bc:b3:31:bf:ed:94:3a:ac:d2:46: e5:60:a2:33:89:6d:df:df:29:87:33:17:d9:25:b2:b2:2c:89: 18:c9:a6:81:d8:03:c1:34:21:bd:bc:f8:4d:fc:aa:d8:5b:b0: d2:40:b2:b2:28:7c:ad:56:de:12:dc:3b:cb:de:88:b4:d1:e2: 55:f1:2c:c6:8b:bd:da:e8:4e:80:f6:14:f1:48:71:15:ef:a3: 73:b0:a4:52:02:cc:25:9b:d8:dd:8e:09:e7:87:f0:3a:f5:bd: 4c:4e:96:28:39:bd:fa:85:99:12:8a:71:3f:b1:cb:83:54:00: 9d:68:6c:f8:03:93:c7:e7:31:c4:7d:65:de:dd:a1:99:8b:a0: 9b:16:e3:b2:35:59:46:90:2e:3a:47:39:ca:46:8f:a4:fc:95: bf:d1:fd:8a:aa:56:fb:f2:74:72:da:24:64:47:76:7d:9f:c6: ed:14:d6:d3:5f:1f:fb:8c:0b:5f:b5:a0:7e:7a:dd:0b:ed:07: ad:e3:8b:eb:d1:72:8a:25:7e:b3:1a:26:2c:43:09:ea:85:b8: 53:30:24:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjUwNDI1MDIzMTM0WhcNMjUwNTAyMDIzMTM0WjAYMRYwFAYD VQQDEw02ODBhZjQwNy02YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFZ4Fxzhx2Zu248QyoKVH7aot8XNupyT6ucIujQZqMb+AycI9QwtXrI0XF38 gvBePmWkZLS1b9SrEiMCKyH5/x1mkGl5ihalVltNbcB1BSRncMxQPZAPJPMmiw6I V0LCZOL0IcvFTb9kFiJjZSqbIV/ecbxLEkXrBfisE6U51/lhy16hcCdmANJRV66x yjjFELFme+/23s3Nd1vMV66OYqgK27/My1GbqNo3KmEppGmCdPZ+xhBVdRs9K5/j Mv9sijTdVcnds9HZn1jgufLO3S0NyfGvR/FkbQkpneLOAAczqP3TrnTAmRigpBCi 93ZCPZDFfKhwAOUueIX1GwwmIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMt5xarh gqrWqBEyUW8D1JMEezOMMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/vEWr+eL2Ctwrq3BwZB9uKfz1vHpu54GcfaJOypej4sCFYQq2xgoj Ln2zgryzMb/tlDqs0kblYKIziW3f3ymHMxfZJbKyLIkYyaaB2APBNCG9vPhN/KrY W7DSQLKyKHytVt4S3DvL3oi00eJV8SzGi73a6E6A9hTxSHEV76NzsKRSAswlm9jd jgnnh/A69b1MTpYoOb36hZkSinE/scuDVACdaGz4A5PH5zHEfWXe3aGZi6CbFuOy NVlGkC46RznKRo+k/JW/0f2Kqlb78nRy2iRkR3Z9n8btFNbTXx/7jAtftaB+et0L 7Qet44vr0XKKJX6zGiYsQwnqhbhTMCQR -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:48 2025 by rpki-client